On 01/07/2015 11:52 AM, Bernhard M. Wiedemann wrote:
On 2014-12-30 09:38, Ludwig Nussel wrote:
==== pam ==== Subpackages: pam-32bit pam-devel
- limit number of processes to 700 to harden against fork-bombs Add pam-limit-nproc.patch
This change of mine caused some trouble for a Tumbleweed/chromium user with many tabs, which each use a separate process. ps ax|wc only showed ~350 when the limit was reached (maybe threads are counted too)
Should we increase the default limits?
700? When I start 'make -j' here, then 700-800 processes are quite common. The usefulness of such a limit to harden against fork-bombs is probably depending very much on the hardware (RAM, CPUs, etc.) ... and on the size of the executables being run. Therefore, I assume that finding a useful limit which is not overly limiting the average (and moderate advanced) users is pretty hard ... but to answer your question: yes, please! Have a nice day, Berny -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org